Officials say the possible breach happened when malware was introduced into the payment system and card numbers may have been compromised.

Visitors to the resort between April 23, 2014 and January 21, 2015 may be affected. The resort says an IT data security company conducted a review. No credit cards used at the resort after January 21 are believed to be at risk.

"We hope to contact anyone who could have been affected by this to ensure that they can act to protect themselves," says Chris Leininger, chief operating officer of French Lick Resort.

Anyone who used a credit or debit card at the resort between April 23, 2014 and January 21, 2015 could be at risk. If you have any questions about if you were affected or what you should do next, call the resort at 877-664-3577.

For anyone who was affected, the resort is offering a year of free identity protection.

"Identity theft can be unsettling and scary," said Chris Leininger. "We're truly sorry that our guests have to experience this, and we'll do our utmost to prevent anything like this from happening in the future."